CN114915650B - Method and system for judging VoIP service observation visual angle based on network element information aggregation - Google Patents

Method and system for judging VoIP service observation visual angle based on network element information aggregation Download PDF

Info

Publication number
CN114915650B
CN114915650B CN202210430295.0A CN202210430295A CN114915650B CN 114915650 B CN114915650 B CN 114915650B CN 202210430295 A CN202210430295 A CN 202210430295A CN 114915650 B CN114915650 B CN 114915650B
Authority
CN
China
Prior art keywords
source
rtp
fixed
network element
destination
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202210430295.0A
Other languages
Chinese (zh)
Other versions
CN114915650A (en
Inventor
刘发强
揭真
石瑾
孙旭东
刘睿霖
李钊
段冬梅
杜梅婕
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
National Computer Network and Information Security Management Center
Original Assignee
National Computer Network and Information Security Management Center
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by National Computer Network and Information Security Management Center filed Critical National Computer Network and Information Security Management Center
Priority to CN202210430295.0A priority Critical patent/CN114915650B/en
Publication of CN114915650A publication Critical patent/CN114915650A/en
Application granted granted Critical
Publication of CN114915650B publication Critical patent/CN114915650B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Telephonic Communication Services (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a method and a system for judging a VoIP service observation view angle based on network element information aggregation, which relate to the field of Internet voice transmission service.

Description

Method and system for judging VoIP service observation visual angle based on network element information aggregation
Technical Field
The invention relates to the field of internet voice transmission service, in particular to a method for judging a VoIP service observation visual angle based on network element information aggregation.
Background
VoIP (Voice over Internet Protocol) refers to a technique for providing a voice-over-transmission service over the internet. The most basic function of VoIP is to provide intelt-based, low cost voice and fax services. It can be further extended to voice over IP services. VoIP is a technology that provides IP telephony services and some value added services based thereon.
In order to perform deep analysis such as mapping on VoIP traffic, the VoIP session needs to be restored first, and control signaling of the VoIP protocol is separated from media data, so that to restore complete VoIP session information from the bypass, the control signaling and the media data must be associated. In order to achieve the purpose of associating signaling with data, the observing position of the VoIP service flow needs to be clarified so as to associate the upstream and downstream network elements of the same session, thereby further associating the control signaling and media data of the same session. At the same time, voIP services have proxy and multi-layer forwarding scenarios that increase the difficulty in determining the VoIP service observation location in the traffic.
Determining the observed location of the VoIP service is to indicate routing information between network elements carrying the VoIP service to which the traffic observation point is connected and the type of service provided by the network elements. The single observation point means that only one traffic observation point is in the complete VoIP session closed loop, i.e. the observation point does not contain global network element information in the session. A complete VoIP session simplified model is shown in figure 1, one or more SIP and RTP server network elements are arranged between a calling network element and a called network element, wherein the SIP server forwards signaling messages, the RTP server forwards media data, and the same server provides SIP and RTP services at the same time. Because the internet in practical application is very complex, even if the position of the traffic observation point is unchanged, multiple layers of associated or unassociated VoIP service networks exist under the traffic observation point, that is, multiple associated or unassociated VoIP call networks shown in fig. 1 may exist under the single observation point. In different VoIP call networks, the point may be located between different network elements providing different services, i.e. the viewing angle may be different in different VoIP networks under the single viewing point. At present, the topology connection relation between network elements is judged aiming at a physical layer and a network layer on the premise of obtaining global traffic, but the judgment problem of a VoIP service observation view angle under a single observation point is not involved, and in an actual application scene, the global traffic of a complete VoIP session closed loop is difficult to obtain, so that the method provided by the invention has very strong practical significance.
The existing method is aimed at judging the topological connection relation between network elements by a physical layer and a network layer on the premise of acquiring complete global traffic, and can not solve the judgment problem of the VoIP service observation view angle under a single observation point. Compared with the network layer and physical layer protocols related in the existing method, the VoIP network is different in the format of protocol messages and the authentication method of network element entities, and the network elements in the VoIP network have a logic connection relationship, which is different from the connection relationship of the physical layer and the network layer, wherein the transmission path of the signaling messages of the VoIP network between the network element entities is not in a layer with the physical layer and the network layer, and the original physical layer and network layer routes cannot be represented. Therefore, the existing method cannot be applied to the VoIP network.
Disclosure of Invention
The invention aims to provide a method and a system for judging a VoIP service observation view angle based on network element information aggregation, which are used for judging service observation positions by carrying out aggregation analysis on VoIP network element information in passive traffic under a single observation point, can provide relevant information of each VoIP service network element under a global observation point and provide effective reference for global VoIP session link restoration.
In order to achieve the above purpose, the present invention adopts the following technical scheme:
a method for judging VoIP service observation view angle based on network element information aggregation comprises the following steps:
capturing VoIP flow from a flow observation point, identifying and analyzing to obtain a VoIP session log, analyzing session information in the log, and establishing a VoIP network element information base;
extracting four key information of source SIP, destination SIP, source RTP and destination RTP from a VoIP network element information base, wherein the source SIP comprises a source SIP network element IP and a calling account IP, the destination SIP comprises a destination SIP network element IP and a called account IP, the source RTP comprises a source RTP network element IP, the destination RTP comprises a destination RTP network element IP, and the four key information is aggregated;
intercepting aggregated data, wherein the intercepted data comprises session data, setting a certain number of session data as a batch, judging once, and judging whether to give an observation visual angle result and how many observation visual angle results according to the multiple relation between the intercepted data and the batch;
for the case where the observation view angle result is given, the following processing is performed on the data of each lot of the integer multiple portion: a source SIP network element IP, a calling account IP and a source RTP network element IP in the data form a source IP set, and the source is determined to be unstable or fixed according to the duty ratio of each IP in the source IP set in the intercepted data; forming a destination IP set by a destination SIP network element IP, a called account IP and a destination RTP network element IP in the data, and judging that the destination is unstable or fixed according to the duty ratio of each IP in the destination IP set in the intercepted data; recording network element IP information fixed on the SIP side and the RTP side according to the judging result;
comparing whether the recorded IP information of the network elements fixed on the SIP side and the RTP side is consistent, and if so, judging that the SIP side and the RTP side share a server network element.
Further, when the source is unstable or fixed, taking the proportion of 50% as a judgment standard; if the single IP with the proportion exceeding 50% in the intercepted data is not in the source IP set, the source is determined to be unstable, otherwise, the source is determined to be fixed.
Further, when the object is determined to be unstable or fixed, taking the proportion of 50% as a determination standard; if the destination IP set has no single IP with the proportion exceeding 50% in the intercepted data, the destination is determined to be unstable, otherwise, the destination is determined to be fixed.
Further, judging whether to give the observation visual angle result and how many observation visual angle results according to the multiple relation between the intercepted data and the batch, wherein the method comprises the following conditions:
setting n pieces of session data as a batch, judging once, and outputting an observation visual angle result, wherein:
if the intercepted data is an integer x of n, giving x observation visual angle results;
if the intercepted data is larger than n but is less than the integer times x of n, giving (x-1) observation visual angle results;
if the intercepted data is less than n, the observation visual angle result is not given.
Further, the cases of judging that the source is indefinite or the source is fixed or the destination is indefinite or the source destination is fixed include 9 kinds:
the SIP side source is indefinite and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed;
SIP side source is fixed, and the purpose is fixed; RTP side source fixation and destination fixation;
SIP side source is fixed, the purpose is indefinite; RTP side source is fixed, the purpose is indefinite;
the SIP side source is indefinite and the purpose is fixed; RTP side source fixation and destination fixation;
SIP side source is fixed, and the purpose is fixed; RTP side source is fixed, the purpose is indefinite;
SIP side source is fixed, and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed;
SIP side source is fixed, the purpose is indefinite; RTP side source fixation and destination fixation;
the SIP side source is indefinite and the purpose is fixed; RTP side source is fixed, the purpose is indefinite;
SIP side source is fixed, the purpose is indefinite; the RTP side source is indefinite and the purpose is fixed.
A system for determining a viewing angle of VoIP service observation based on network element information aggregation, comprising:
the VoIP flow analysis module is used for capturing VoIP flow from the flow observation point, obtaining a VoIP session log through identification and analysis, and analyzing session information in the log;
the network element information storage module is used for receiving the data output by the VoIP flow analysis module and storing a VoIP network element information base;
the data aggregation module is used for extracting four types of key information, namely source SIP, destination SIP, source RTP and destination RTP, from a VoIP network element information base, wherein the source SIP comprises a source SIP network element IP and a calling account IP, the destination SIP comprises a destination SIP network element IP and a called account IP, the source RTP comprises a source RTP network element IP, the destination RTP comprises a destination RTP network element IP, and the four types of key information are aggregated;
the viewing angle judging module is used for intercepting the aggregated data, wherein the intercepted data comprises a plurality of pieces of session data, and the viewing angle is judged according to the intercepted data; a source IP set is formed by a source SIP network element IP, a calling account IP and a source RTP network element IP in the aggregated data, and the source is determined to be unstable or fixed according to the duty ratio of each IP in the source IP set in the intercepted data; a destination IP set is formed by a destination SIP network element IP, a called account IP and a destination RTP network element IP in the aggregated data, and the destination is determined to be unstable or fixed according to the duty ratio of each IP in the destination IP set in the intercepted data; recording network element IP information fixed on the SIP side and the RTP side according to the judging result; comparing whether the recorded IP information of the network elements fixed on the SIP side and the RTP side is consistent, and if so, judging that the SIP side and the RTP side share a server network element.
Compared with the prior art, the invention carries out aggregation analysis on network element information in VoIP service flow under a single observation point without global VoIP session flow, defines a plurality of effective network element key information elements and association relations among the elements, and comprises service information provided by the network element of the observation point, link direction of receiving and transmitting data, voIP service attribute, possible topological relation and the like, thereby providing information such as upstream and downstream links, topological relation and provided service type and the like of the network element related to the observation point; the network element information and the link direction information on both sides of the observation position can be restored, and the upstream and downstream network elements of one session can be associated, so that the control signaling and the media data of the same session can be further associated, the deep analysis of restoring the VoIP session, mapping VoIP resources and the like can be realized, the standardized management of VoIP service can be finally realized, and the supervision purposes of private establishment, malicious service breeding and the like can be achieved.
Drawings
Fig. 1 is a schematic diagram of a complete VoIP conversation path.
Fig. 2 is a decision flow diagram of a VoIP service observation perspective in an embodiment of the present invention.
Fig. 3 is a schematic view of 9 kinds of observation views of VoIP service in an embodiment of the present invention.
Fig. 4 is a schematic diagram illustrating a possible topology in an example of the present invention.
Detailed Description
In order to make the above features and advantages of the present invention more comprehensible, embodiments accompanied with figures are described in detail below.
The embodiment provides a method for determining a VoIP service observation perspective based on network element information aggregation, as shown in fig. 2, including the following steps:
step 1: firstly, identifying and analyzing the VoIP flow in the original flow captured by the flow observation point to obtain a VoIP session log, further analyzing session information in the log, and establishing a rich VoIP network element information base;
step 2: the key information of the network element can be extracted from the network element, and the key information is aggregated in four types of source SIP (source SIP network element IP and calling account IP), destination SIP (destination SIP network element IP and called account IP), source RTP (source RTP network element IP) and destination RTP (destination RTP network element IP);
step 3: and transmitting the aggregated data to a visual angle judging module as input, and finally, directly outputting a visual result of visual angle judgment by the module. The logic of the view angle determination module is as follows:
(1) Setting a data interception range: setting every n=50 pieces of session data as a batch and judging once, and outputting a possible observation visual angle result;
if the intercepted data is an integer x of n, x observation visual angle results are given;
if the intercepted data is larger than n but is less than the integer multiple x of n, giving (x-1) observation visual angle results;
if the intercepted data is less than n, the observation visual angle result is not given.
The range and n value of data interception should be flexibly selected according to the complexity of the network at the time. In a simple network, the number of network elements is small, and less data can be intercepted to obtain a reliable result; in a complex network, the number of network elements is large, and more data need to be intercepted to obtain a reliable result.
The general principle is: the more sessions intercepted in a certain time, the more the reliability of the judgment is increased; when determining the number of intercepted sessions, the reliability of the judgment increases as the value of n is closer to all intercepted session data; the smaller n is relative to the total session data amount intercepted, the reliability of the judgment is reduced, but a plurality of possible results can be obtained for auxiliary judgment.
The method does not adopt a method of intercepting a range of data in a time period generated by session data, and the reason is that: if a session of a certain time period is intercepted, the accuracy of the judgment is insufficient due to the fact that the percentage of each IP is possibly uniform in a time period which is wide enough under the condition of massive data, and generally, a single IP does not exceed 50%; meanwhile, the VoIP call activity time span fluctuates greatly (thousands of session data are available for some network element nodes in one day and thousands of data are available for some network element nodes in one month), so that it is difficult to measure how to intercept the time range.
(2) Judging whether a SIP/RTP side source or destination network element is fixed or not:
for the case where the observation angle result is given in step (1), the data of each lot of the integer multiple portion is subjected to the following processing, respectively. The meaning of each batch of the integral multiple part is that if the intercepted data is greater than n but less than the integral multiple x of n, (x-1) batches are judged, for example, the intercepted data is 120, and the set session data amount of each batch is 50, the intercepted data is obviously 2.4 times of each batch, only batches of the 2 times part (i.e. batches of two 50 pieces of session data) are processed, and batches of the non-integral part (i.e. incomplete batches of the rest 20 pieces of parts) are not processed. The treatment process is as follows:
whether the source network element is fixed: if the data of the aggregated source IP set are uniformly distributed, and the data in the data interception range does not have a single IP with the proportion exceeding 50%, defining the condition as 'source uncertainty'; if the source IP set aggregated by the data aggregation module is uneven in data distribution, and a certain IP ratio in the data interception range exceeds 50%, the condition is defined as 'source fixed'.
Whether the destination network element is fixed: if the data of the destination IP set aggregated by the data aggregation module are uniformly distributed, and no single IP with the ratio exceeding 50% exists in the data interception range, defining the situation as 'destination indefinite'; if the distribution of the data of the destination IP set aggregated by the data aggregation module is uneven, and the certain IP ratio in the data interception range exceeds 50%, the condition is defined as 'destination fixed'.
Based on the aforementioned view decision logic, voIP service at a single traffic observation point is not in addition to the following 9 observation view results (as shown in fig. 3):
viewing angle (1): the SIP side source is indefinite and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed.
Viewing angle (2): SIP side source is fixed, and the purpose is fixed; RTP side source is fixed, purpose is fixed.
Viewing angle (3): SIP side source is fixed, the purpose is indefinite; RTP side source is fixed, the purpose is variable.
Viewing angle (4): the SIP side source is indefinite and the purpose is fixed; RTP side source is fixed, purpose is fixed.
Viewing angle (5): SIP side source is fixed, and the purpose is fixed; RTP side source is fixed, the purpose is variable.
Viewing angle (6): SIP side source is fixed, and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed.
Viewing angle (7): SIP side source is fixed, the purpose is indefinite; RTP side source is fixed, purpose is fixed.
Viewing angle (8): the SIP side source is indefinite and the purpose is fixed; RTP side source is fixed, the purpose is variable.
Viewing angle (9): SIP side source is fixed, the purpose is indefinite; the RTP side source is indefinite and the purpose is fixed.
And respectively recording the network element IP information fixed on the SIP side and the RTP side according to the judging result.
(3) And finding out a certain side with fixed network elements for comparison, and if the SIP of the side is consistent with the RTP network element information, judging that the SIP/RTP of the side shares a server network element.
The invention carries on the aggregate analysis to the network element information in the VoIP service flow under the single observation point without the global VoIP conversation flow, has defined several effective network element key information elements and the association relation between each element, including the service information (SIP service or RTP service) that the observation point concerned network element provides, the link direction of the receiving and transmitting data (source SIP/RTP is the transmitting data side, destination SIP/RTP is the receiving data side), voIP service attribute (VoIP service is the server type or mobile terminal type, the "calling" and "called" of both ends defaults to the mobile terminal type in this method in figure 3), possible topological relation (for example, as shown in figure 4, judge the dotted line as the observation view angle according to this method, combine the 6 kinds of network element service information and link direction of the aggregate, can obtain two kinds of topological relation; the network element information and the link direction information on both sides of the observation position can be restored, and the upstream and downstream network elements of one session can be associated, so that the control signaling and the media data of the same session can be further associated, the deep analysis of restoring the VoIP session, mapping VoIP resources and the like can be realized, the standardized management of VoIP service can be finally realized, and the supervision purposes of private establishment, malicious service breeding and the like can be achieved.
Although the present invention has been described with reference to the above embodiments, it should be understood that the invention is not limited thereto, and that modifications and equivalents may be made thereto by those skilled in the art, which modifications and equivalents are intended to be included within the scope of the present invention as defined by the appended claims.

Claims (6)

1. The method for judging the VoIP service observation view angle based on the network element information aggregation is characterized by comprising the following steps:
capturing VoIP flow from a flow observation point, identifying and analyzing to obtain a VoIP session log, analyzing session information in the log, and establishing a VoIP network element information base;
extracting four key information of source SIP, destination SIP, source RTP and destination RTP from a VoIP network element information base, wherein the source SIP comprises a source SIP network element IP and a calling account IP, the destination SIP comprises a destination SIP network element IP and a called account IP, the source RTP comprises a source RTP network element IP, the destination RTP comprises a destination RTP network element IP, and the four key information is aggregated;
intercepting aggregated data, wherein the intercepted data comprises session data, setting a certain number of session data as a batch, judging once, and judging whether to give an observation visual angle result and how many observation visual angle results according to the multiple relation between the intercepted data and the batch;
for the case where the observation view angle result is given, the following processing is performed on the data of each lot of the integer multiple portion: a source SIP network element IP, a calling account IP and a source RTP network element IP in the data form a source IP set, and the source is determined to be unstable or fixed according to the duty ratio of each IP in the source IP set in the intercepted data; forming a destination IP set by a destination SIP network element IP, a called account IP and a destination RTP network element IP in the data, and judging that the destination is unstable or fixed according to the duty ratio of each IP in the destination IP set in the intercepted data; recording network element IP information fixed on the SIP side and the RTP side according to the judging result;
comparing whether the recorded IP information of the network elements fixed on the SIP side and the RTP side is consistent, and if so, judging that the SIP side and the RTP side share a server network element.
2. The method according to claim 1, wherein the determination is made as to whether the source is unstable or fixed, with a 50% ratio as the determination criterion; if the single IP with the proportion exceeding 50% in the intercepted data is not in the source IP set, the source is determined to be unstable, otherwise, the source is determined to be fixed.
3. The method according to claim 1, wherein the determination is based on a 50% ratio when the object is unstable or fixed; if the destination IP set has no single IP with the proportion exceeding 50% in the intercepted data, the destination is determined to be unstable, otherwise, the destination is determined to be fixed.
4. The method of claim 1, wherein determining whether to give the observation perspective result and how many observation perspective results based on the multiple of the intercepted data and the lot comprises:
setting n pieces of session data as a batch, judging once, and outputting an observation visual angle result, wherein:
if the intercepted data is an integer x of n, giving x observation visual angle results;
if the intercepted data is larger than n but is less than the integer times x of n, giving (x-1) observation visual angle results;
if the intercepted data is less than n, the observation visual angle result is not given.
5. The method of claim 1, wherein the determination of source uncertainty or source fixed, destination uncertainty, or source destination fixed comprises 9 cases:
the SIP side source is indefinite and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed;
SIP side source is fixed, and the purpose is fixed; RTP side source fixation and destination fixation;
SIP side source is fixed, the purpose is indefinite; RTP side source is fixed, the purpose is indefinite;
the SIP side source is indefinite and the purpose is fixed; RTP side source fixation and destination fixation;
SIP side source is fixed, and the purpose is fixed; RTP side source is fixed, the purpose is indefinite;
SIP side source is fixed, and the purpose is fixed; the RTP side source is indefinite and the purpose is fixed;
SIP side source is fixed, the purpose is indefinite; RTP side source fixation and destination fixation;
the SIP side source is indefinite and the purpose is fixed; RTP side source is fixed, the purpose is indefinite;
SIP side source is fixed, the purpose is indefinite; the RTP side source is indefinite and the purpose is fixed.
6. A system for determining a viewing angle of VoIP service observation based on network element information aggregation, comprising:
the VoIP flow analysis module is used for capturing VoIP flow from the flow observation point, obtaining a VoIP session log through identification and analysis, and analyzing session information in the log;
the network element information storage module is used for receiving the data output by the VoIP flow analysis module and storing a VoIP network element information base;
the data aggregation module is used for extracting four types of key information, namely source SIP, destination SIP, source RTP and destination RTP, from a VoIP network element information base, wherein the source SIP comprises a source SIP network element IP and a calling account IP, the destination SIP comprises a destination SIP network element IP and a called account IP, the source RTP comprises a source RTP network element IP, the destination RTP comprises a destination RTP network element IP, and the four types of key information are aggregated;
the viewing angle judging module is used for intercepting the aggregated data, wherein the intercepted data comprises a plurality of pieces of session data, and the viewing angle is judged according to the intercepted data; a source IP set is formed by a source SIP network element IP, a calling account IP and a source RTP network element IP in the aggregated data, and the source is determined to be unstable or fixed according to the duty ratio of each IP in the source IP set in the intercepted data; a destination IP set is formed by a destination SIP network element IP, a called account IP and a destination RTP network element IP in the aggregated data, and the destination is determined to be unstable or fixed according to the duty ratio of each IP in the destination IP set in the intercepted data; recording network element IP information fixed on the SIP side and the RTP side according to the judging result; comparing whether the recorded IP information of the network elements fixed on the SIP side and the RTP side is consistent, and if so, judging that the SIP side and the RTP side share a server network element.
CN202210430295.0A 2022-04-22 2022-04-22 Method and system for judging VoIP service observation visual angle based on network element information aggregation Active CN114915650B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210430295.0A CN114915650B (en) 2022-04-22 2022-04-22 Method and system for judging VoIP service observation visual angle based on network element information aggregation

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210430295.0A CN114915650B (en) 2022-04-22 2022-04-22 Method and system for judging VoIP service observation visual angle based on network element information aggregation

Publications (2)

Publication Number Publication Date
CN114915650A CN114915650A (en) 2022-08-16
CN114915650B true CN114915650B (en) 2023-08-08

Family

ID=82764623

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210430295.0A Active CN114915650B (en) 2022-04-22 2022-04-22 Method and system for judging VoIP service observation visual angle based on network element information aggregation

Country Status (1)

Country Link
CN (1) CN114915650B (en)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101056283A (en) * 2007-06-07 2007-10-17 杭州华三通信技术有限公司 Voice gateway and method for providing VoIP service
CN101116296A (en) * 2004-12-31 2008-01-30 奈克斯通通信公司 Voip network infrastructure components and method
CN102299962A (en) * 2011-08-24 2011-12-28 中兴通讯股份有限公司 Cloud-based Voice over Internet Protocol (VoIP) system, device and method
CN102804744A (en) * 2009-06-15 2012-11-28 卡拉布瑞欧有限公司 Distributed record server architecture for recording call sessions over a VoIP network
CN105991856A (en) * 2015-03-05 2016-10-05 李明 VOIP routing based on RTP server-to-server routing
CN107070741A (en) * 2017-03-13 2017-08-18 中国人民解放军信息工程大学 A kind of voip network topology detection method analyzed based on gateway space time correlation
EP3582467A1 (en) * 2018-06-12 2019-12-18 Orange Gateway and method for managing a voip telephone service
CN110798379A (en) * 2019-10-23 2020-02-14 国家计算机网络与信息安全管理中心 VoIP signaling gateway identification method, device and readable storage medium
CN111541645A (en) * 2020-03-24 2020-08-14 国家计算机网络与信息安全管理中心 VoIP service knowledge base construction method and system

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7961717B2 (en) * 2005-05-12 2011-06-14 Iposi, Inc. System and methods for IP and VoIP device location determination
KR20100120823A (en) * 2009-05-07 2010-11-17 충남대학교산학협력단 Voip anomaly traffic detection method with flow-level data

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101116296A (en) * 2004-12-31 2008-01-30 奈克斯通通信公司 Voip network infrastructure components and method
CN101056283A (en) * 2007-06-07 2007-10-17 杭州华三通信技术有限公司 Voice gateway and method for providing VoIP service
CN102804744A (en) * 2009-06-15 2012-11-28 卡拉布瑞欧有限公司 Distributed record server architecture for recording call sessions over a VoIP network
CN102299962A (en) * 2011-08-24 2011-12-28 中兴通讯股份有限公司 Cloud-based Voice over Internet Protocol (VoIP) system, device and method
CN105991856A (en) * 2015-03-05 2016-10-05 李明 VOIP routing based on RTP server-to-server routing
CN107070741A (en) * 2017-03-13 2017-08-18 中国人民解放军信息工程大学 A kind of voip network topology detection method analyzed based on gateway space time correlation
EP3582467A1 (en) * 2018-06-12 2019-12-18 Orange Gateway and method for managing a voip telephone service
CN110798379A (en) * 2019-10-23 2020-02-14 国家计算机网络与信息安全管理中心 VoIP signaling gateway identification method, device and readable storage medium
CN111541645A (en) * 2020-03-24 2020-08-14 国家计算机网络与信息安全管理中心 VoIP service knowledge base construction method and system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"Security Status of VoIP Based on the Observation of Real-World Attacks on a Honeynet".《2011 IEEE Third International Conference on Privacy, Security, Risk and Trust and 2011 IEEE Third International Conference on Social Computing》.2012,全文. *

Also Published As

Publication number Publication date
CN114915650A (en) 2022-08-16

Similar Documents

Publication Publication Date Title
US10721276B2 (en) Providing SIP signaling data for third party surveillance
US20230007120A1 (en) Method and apparatus for threat identification through analysis of communications signaling, events, and participants
US7123710B2 (en) Method and systems for intelligent signaling router-based surveillance
KR101224254B1 (en) Next generation integration between different domains, such as, enterprise and service provider using sequencing applications and ims peering
US20240171513A1 (en) Dynamic Loop Detection and Suppression
US20080292077A1 (en) Detection of spam/telemarketing phone campaigns with impersonated caller identities in converged networks
US8505087B2 (en) Signal transfer point front end processor
CN111541645B (en) VoIP service knowledge base construction method and system
US7406159B2 (en) Methods, systems, and computer program products for automatically populating signaling-based access control database
CN114915650B (en) Method and system for judging VoIP service observation visual angle based on network element information aggregation
US8913603B2 (en) Methods and systems for automatic time-based routing rule administration
EP3726825B1 (en) System and method for detecting fraud in international telecommunication traffic
CN113966589A (en) Processing of legally intercepted SIP messages
Kamwendo Vulnerabilities of Signaling System Number 7 (SS7) to Cyber Attacks and how to Mitigate Against These Vulnerabilities

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant